CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-20 16:03:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

only save at the end

Browse Source
This commit is contained in:
m0duspwnens
2021-02-10 11:15:39 -05:00
parent 10553938b5
commit 3cfbc61f4e
1 changed files with 0 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/firewall/init.sls
View File

@@ -34,7 +34,6 @@ iptables_allow_established:
- jump: ACCEPT
- match: conntrack
- ctstate: 'RELATED,ESTABLISHED'
- save: True
# I like pings
iptables_allow_pings:
@@ -43,7 +42,6 @@ iptables_allow_pings:
- chain: INPUT
- jump: ACCEPT
- proto: icmp
- save: True
# Create the chain for logging
iptables_LOGGING_chain:
@@ -68,7 +66,6 @@ iptables_log_input_drops:
- table: filter
- chain: INPUT
- jump: LOGGING
- save: True
# Enable global DOCKER-USER block rule
enable_docker_user_fw_policy:
@@ -79,7 +76,6 @@ enable_docker_user_fw_policy:
- in-interface: '!docker0'
- out-interface: docker0
- position: 1
- save: True
enable_docker_user_established:
iptables.insert:
@@ -89,7 +85,6 @@ enable_docker_user_established:
- in-interface: '!docker0'
- out-interface: docker0
- position: 1
- save: True
- match: conntrack
- ctstate: 'RELATED,ESTABLISHED'
@@ -115,7 +110,6 @@ enable_docker_user_established:
{% if action == 'insert' %}
- position: 1
{% endif %}
- save: True
{% endfor %}
{% endfor %}